Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

harrythook

Posted 23 February 2008 - 07:40 PM

Hey mrblue,Sorry, I lost you in the pile of work I have here, but I did not forget about you.

The next step I would like to do is run System File Checker, to make sure all of your protected files are not corrupt. The scan will automatically replace any corrupt files that it finds.

Click StartSelect RunAt the prompt type sfc /scannowPlease note that there is a single space between sfc and /scannow.

Typing this will start the program, and a box should appear telling you how much longer the process should take.

Sometimes the scan will prompt you for your Windows XP disc upon starting the scan. if this happens please make sure that you can view protected files:My ComputerTools Folder OptionsView"Uncheck" Hide protected operating system files.

Then rerun the scan. If this still asks you to put in your windows XP CD, and you do not have the CD (If you bought it preinstalled) post back for more tips, otherwise enter Windows CD.

Once the scan is complete:

Check your Windows Updates! After using the File Protection Service, you might need to reapply some updates.

mrblue

Posted 24 February 2008 - 05:50 AM

Did the scan (it didn't prompt me for a CD) and finished with no errors or messages.

Checked for Windows Updates, and it found only 1: Microsoft Office 2003. (Office 2003 Service Pack 3) 119MB.

As I hardly ever use Office I won't bother with it. I do need to reorganise my C: drive because as you can see there's not much space left out of the 18GB, and loading another 119MB certainly won't help! Difficult to delete/move folders around though if I can't browse windows folders!!!!!!!

Incidentally I got the error message this morning immediately after booting up my laptop! Seems to be getting worse.

harrythook

Posted 24 February 2008 - 09:30 AM

harrythook

Trusted Helper

Retired Staff

2,618 posts

Hey mrblue,I am beginning to believe that there are other than malware problems there.The system file checker should have come up with something if a windows file was corrupted Some of these programs might be competing against each other, this is a partial list of what I see:

Lets clean up a bit:Please download ATF Cleaner by Atribune.This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.Under Main choose: Select AllClick the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.For Technical Support, double-click the e-mail address located at the bottom of each menu.

Click START then RUN

Now type Combofix /u in the runbox and click OK

When shown the disclaimer, Select "2"

The above procedure will:

Delete the following:

ComboFix and its associated files and folders.

VundoFix backups, if present

The C:\Deckard folder, if present

The C:_OtMoveIt folder, if present

Reset the clock settings.

Hide file extensions, if required.

Hide System/Hidden files, if required.

Reset System Restore.

I would like you to review your installed programs, try to delete unused/unwanted items.Post a fresh HJT log, lets look that over again.

Harry

0

Advertisements

mrblue

Posted 24 February 2008 - 12:10 PM

mrblue

Member

Topic Starter

Member

125 posts

Ok, all done.

I'm thinking that I DON'T have any malware, or spyware, but perhaps some conflicting software as you suggest. I haven't been using Online Armor for very long. I was using Agnitum Outpost Firewall for years with no problem, then it started stopping me from sending emails for some strange reason. So I had to uninstall it. Maybe I should try a different firewall??

Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Please download the OTMoveIt2 by OldTimer.

Save it to your desktop.

Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")

Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

C:\Program Files\Ares
C:\Program Files\SpyCatcher

Click the red Moveit! button.

A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.

Close OTMoveIt2

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

mrblue

Posted 24 February 2008 - 02:33 PM

Ok, problem still comes and goes. I ran ccleaner also, that cleans a little more than ATF seems to.

Just found something strange....

I was just deleting old Programs that had I had previously allowed in my Firewall application.

It also allows me to look at the "hosts" file (whatever that is). This is normally empty. However, it now has hundreds of entries with names of shall we say an "adult" nature!!! They are all "allowed" in the firewall too!!!!!

It will take me ages to delete them 1 by 1. Is there a way I can clear this file in one go???

Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.

Different scan again, just to see. I really hate making you do all this work, but I have to make sure we are going in the right direction.

Download WinPFind35U.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind35u on your desktop.

Close any open browsers.

Close/disable all anti virus and anti malware programs so they do not interfere with the running of WinpFind35U.

-----------------------------------------------------------

Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with WinpFind35U or remove some of its embedded files which may cause "unpredictable results".

Click onthis linkto see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

-----------------------------------------------------------

Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.

Now click the Run Scan button on the toolbar.

The program will be scanning huge amounts of data so depending on your system it could take a long time to complete. Let it run unhindered until it finishes.

When the scan is complete Notepad will open with the report file loaded in it.

Save that notepad file

Use the Reply button and attach the notepad file here (Do not copy and paste in a reply, rather attach it to it).

I am off to New York for work tomorrow, might take a bit to reply, hang in there